Track · CPTS · Medium
CPTS Preparation
The Hack The Box CPTS Preparation track equips learners with the essential knowledge and practical skills needed to succeed in the Certified Penetration Testing Specialist exam. Covering core penetration testing concepts through hands-on challenges, this track helps participants build the confidence and expertise required to approach the certification with success.
Fluffy
Hack The Box CPTS-Track Writeup für Fluffy: Assumed Breach, CVE-2025-24071 NTLM Capture, Shadow Credentials, WinRM und AD CS ESC16.
Jeeves
Hack The Box CPTS-Track Writeup für Jeeves: Jenkins Script Console RCE, KeePass Credential Recovery, Pass-the-Hash und Root-Flag in Alternate Data Streams.
Trick
Hack The Box CPTS-Track Writeup für Trick: DNS AXFR, vHost-Discovery, Payroll SQLi, Marketing LFI, SSH-Key-Disclosure und Fail2Ban Privilege Escalation.
Postman
Hack The Box CPTS-Track Writeup für Postman: unauthenticated Redis file write, SSH als redis, KeePass/SSH-Key Credential Recovery, Matt-Pivot und Webmin CVE-2019-12840.
POV
Hack The Box CPTS-Track Writeup für POV: ASP.NET Arbitrary File Read, machineKey Disclosure, ViewState Forgery, DPAPI Credential Recovery, WinRM Pivot und SeDebugPrivilege zu SYSTEM.
TombWatcher
Hack The Box CPTS-Track Writeup für TombWatcher: AD Enumeration, WriteSPN Kerberoasting, gMSA Abuse, ACL Chain, ADCS ESC15 und Schannel LDAP Auth zu Domain Admin.
Media
Hack The Box CPTS-Track Writeup für Media: UNC-basierter NetNTLMv2-Capture, Credential Cracking, SSH-Foothold, NTFS Junction Webroot Write und SeTcbPrivilege Abuse.
VulnCicada
Hack The Box CPTS-Track Writeup für VulnCicada: NFS-Profil-Leak, Kerberos-only Zugriff, ADCS ESC8 Kerberos Relay, DC-Maschinenzertifikat und DCSync zu Administrator.
StreamIO
Hack The Box CPTS-Track Writeup für StreamIO: Web Enumeration, MSSQL Injection, Credential Cracking, PHP LFI/RFI, SQL Backup Credentials, WinRM Foothold, AD ACL Abuse und LAPS zu Administrator.
Voleur
Hack The Box CPTS-Track Writeup für Voleur: Kerberos-only Active Directory Enumeration, verschlüsseltes Access Review, User Restore, DPAPI, targeted Kerberoasting, WSL/SSH und Offline-NTDS zu Administrator.
Administrator
Hack The Box CPTS-Track Writeup für Administrator: Active Directory ACL Abuse, Password Reset Chain, Password Safe Loot, targeted Kerberoasting, DCSync und Pass-the-Hash zu Domain Admin.
Authority
Hack The Box CPTS-Track Writeup für Authority: Anonymous SMB Loot, Ansible Vault Secrets, PWM Configuration Abuse, LDAP Bind Capture, WinRM Foothold und AD CS ESC1 zu Administrator.
Craft
Hack The Box CPTS-Track Writeup für Craft: Vhost Enumeration, Gogs Git-History Leak, authentifizierte API eval-RCE, Container Secrets, Gogs Pivot, SSH als gilfoyle und Vault SSH OTP zu root.
Redelegate
Hack The Box CPTS-Track Writeup für Redelegate: Anonymous FTP, KeePass Crack, MSSQL SID Enumeration, gezielter Password Spray, ACL Abuse, constrained delegation, DCSync und Administrator Pass-the-Hash.
Snoopy
Hack The Box CPTS-Track Writeup für Snoopy: Web File Disclosure, BIND Dynamic DNS Abuse, Mattermost Password Reset Interception, SSH Foothold, sudo git apply Symlink Abuse und ClamAV CVE-2023-20052 zu root.
Ghost
Hack The Box CPTS-Track Writeup für Ghost: LDAP-Login-Bypass, Gitea Source Disclosure, Container RCE, AD DNS Abuse, NetNTLMv2 Capture, gMSA, AD FS SAML Forgery, linked SQL, IFM Dump und Golden Ticket Forest Escalation.